Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
2026-05-26T13:23:31Z•f5d3e609bcaf7ca30193ee89ab79e802ee952c28519a181196d99964d4f7a164
adobe-readeranti-ddos-abuseaws-govcloudbluehammercanvaschrome-zero-daycisacredential-exposuredata-extortiondata-leakddoseducation-breachgithub-leakiot-botnetkimwolflaw-enforcementnation-state-activitypatch-tuesdayrouter-exploit','microsoft-office-tokens'russia-linkedserver-seizuresharepointstark-industries-solutionsvulnerabilitieszero-day
What happened
Collection of KrebsOnSecurity reports (Apr–May 2026) describing multiple high-impact incidents: a Dutch law-enforcement seizure of ~800 servers and arrests of two hosting co‑owners for operating infrastructure used by Russian intelligence-linked operations (Stark Industries Solutions); a major CISA breach where a contractor published highly privileged AWS GovCloud credentials and internal build/deploy artifacts on a public GitHub repo; the arrest and cross-border charging of an alleged Kimwolf IoT botnet operator responsible for massive DDoS activity; a data‑extortion campaign against the ed‑/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- f5d3e609bcaf7ca30193ee89ab79e802ee952c28519a181196d99964d4f7a164
- Enrichment time
- 2026-05-26T13:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.